Which statement describes inherent risk?

Which statement describes inherent risk?

• A. Inherent risk is the risk that controls fail to detect misstatements.
• B. Inherent risk is the risk that an assertion will be misstated due to management bias.
• C. Inherent risk is the risk that misstatements occur because of internal control weakness.
• D. The susceptibility to misstatement due to the nature of the item.

Answer: (D)

Inherent risk is the susceptibility of a misstatement to occur due to the item’s inherent characteristics, independent of any controls. It reflects how likely a misstatement could exist simply because of the nature of the account, transaction type, or estimation complexity. This is different from risks tied to controls or detection. The best description is that inherent risk is the susceptibility to misstatement due to the nature of the item. For example, highly judgmental valuations or complex, volatile transactions typically carry higher inherent risk. The other statements mix in aspects of detection risk and control risk, which are separate concepts. Controls failing to detect misstatements describes detection risk, not inherent risk. Management bias relates to motive for misstatement but inherent risk focuses on intrinsic characteristics, not intent. Misstatements arising from weak internal controls describe control risk, not the inherent susceptibility of the item itself.

Inherent risk is the susceptibility of a misstatement to occur due to the item’s inherent characteristics, independent of any controls. It reflects how likely a misstatement could exist simply because of the nature of the account, transaction type, or estimation complexity. This is different from risks tied to controls or detection.

The best description is that inherent risk is the susceptibility to misstatement due to the nature of the item. For example, highly judgmental valuations or complex, volatile transactions typically carry higher inherent risk.

The other statements mix in aspects of detection risk and control risk, which are separate concepts. Controls failing to detect misstatements describes detection risk, not inherent risk. Management bias relates to motive for misstatement but inherent risk focuses on intrinsic characteristics, not intent. Misstatements arising from weak internal controls describe control risk, not the inherent susceptibility of the item itself.